Alpine/sdl2: high 8.1

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c.

Action: Upgrade sdl2 to 2.0.10-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2019-7578#Alpine:v3.7/sdl2
• https://security.alpinelinux.org/vuln/CVE-2019-7578

published 2019-02-07T07:29:01.037Z · modified 2026-09-21T06:17:52.542032990Z · JSON